dndimitr
Forum Replies Created
-
Forum: Plugins
In reply to: [Simple Membership] Maybe a security issueHi, I tested what you said. I changed the amount of money inspecting the HTML code and I applied a transaction. The new amount is presented in Paypal sandbox page and I completed the payment. Then, a new account was created in the member list while there isn’t a transaction available in transaction list because “IPN product validation failed.”. However, this failure is also presented when I do not change the amount of money.
To conclude, when I test the subscription button without changing the amount of money manually by inspecting the html, some times I get
[07/15/2020 10:56 AM] – FAILURE: Funds have not been cleared yet. Transaction will be processed when the funds clear!
[07/15/2020 10:56 AM] – FAILURE: IPN product validation failed.When I test the subscription button changing the amount of money manually by inspecting the html, some times I get the same failure.
In both two cases, the amount of money may or may not be added it to the merchant account balance. Some times, I also see the changed amount of money in the transaction list.
Forum: Plugins
In reply to: [Simple Membership] Maybe a security issueI created a new button for subscription following the steps:
Payments->Create New Button->Paypal Subscription
And I defined 30 euros as billing amount.A new button with shortcode was created. I got that shortcode and added it to
a page. I used the inspector to check if the button worked well and I observed that there is a hidden input tag in which one can change the amount of money.The tag is:
<input type="hidden" name="a3" value="30">If I change the value of the tag, then a new billing amount is passed. The problem is that when I click to the submit button, the new amount is also passed to the paypal api.